Commit Graph

70 Commits

Author SHA1 Message Date
Sean Mullan
db85090553 8338411: Implement JEP 486: Permanently Disable the Security Manager
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Brian Burkhalter <bpb@openjdk.org>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Co-authored-by: Harshitha Onkar <honkar@openjdk.org>
Co-authored-by: Joe Wang <joehw@openjdk.org>
Co-authored-by: Jorn Vernee <jvernee@openjdk.org>
Co-authored-by: Justin Lu <jlu@openjdk.org>
Co-authored-by: Kevin Walls <kevinw@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Naoto Sato <naoto@openjdk.org>
Co-authored-by: Roger Riggs <rriggs@openjdk.org>
Co-authored-by: Brent Christian <bchristi@openjdk.org>
Co-authored-by: Stuart Marks <smarks@openjdk.org>
Co-authored-by: Ian Graves <igraves@openjdk.org>
Co-authored-by: Phil Race <prr@openjdk.org>
Co-authored-by: Erik Gahlin <egahlin@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Reviewed-by: kevinw, aivanov, rriggs, lancea, coffeys, dfuchs, ihse, erikj, cjplummer, coleenp, naoto, mchung, prr, weijun, joehw, azvegint, psadhukhan, bchristi, sundar, attila
2024-11-12 17:16:15 +00:00
Sonia Zaldana Calles
8a2a75e56d 8339892: Several security shell tests don't set TESTJAVAOPTS
Reviewed-by: valeriep
2024-11-12 13:19:06 +00:00
Weijun Wang
d63d6e23d1 8336935: Test sun/security/krb5/auto/RealmSpecificValues.java fails: java.lang.RuntimeException: Should not reach here
Reviewed-by: hchao, dholmes
2024-07-22 22:17:43 +00:00
Weijun Wang
c740e1e3b0 8333772: Incorrect Kerberos behavior when udp_preference_limit = 0
Reviewed-by: ssahoo, mullan
2024-07-22 16:00:40 +00:00
Weijun Wang
da3001daf7 8331975: Enable case-insensitive check in ccache and keytab entry lookup
Reviewed-by: mpowers, valeriep
2024-05-24 01:16:43 +00:00
Weijun Wang
31a1f9c493 8307143: CredentialsCache.cacheName should not be static
Reviewed-by: valeriep
2024-04-16 01:03:14 +00:00
Sean Coffey
3b582dff84 8051959: Add thread and timestamp options to java.security.debug system property
Reviewed-by: mullan, weijun
2024-04-02 08:51:13 +00:00
Weijun Wang
569b05addf 8327818: Implement Kerberos debug with sun.security.util.Debug
Reviewed-by: coffeys, ssahoo
2024-03-18 15:36:28 +00:00
Leo Korinth
d52a995f35 8315097: Rename createJavaProcessBuilder
Reviewed-by: lmesnik, dholmes, rriggs, stefank
2023-10-27 08:47:26 +00:00
Weijun Wang
1ddf826aea 8316964: Security tools should not call System.exit
Reviewed-by: valeriep
2023-10-24 18:32:01 +00:00
Weijun Wang
d7d1d42b67 8316771: Krb5.java has not defined messages for all error codes
Reviewed-by: mullan
2023-10-02 19:55:22 +00:00
Weijun Wang
f985006142 8309356: Read files in includedir in alphanumeric order
Reviewed-by: mullan
2023-10-02 18:12:06 +00:00
Erik Joelsson
020255a72d 8267174: Many test files have the wrong Copyright header
Reviewed-by: valeriep, aivanov, iris, dholmes, ihse
2023-09-12 20:16:05 +00:00
Weijun Wang
e624484ecf 8308540: On Kerberos TGT referral, if krb5.conf is missing realm, bad exception message
Reviewed-by: xuelei
2023-06-26 15:55:36 +00:00
Alexey Ivanov
e0d361cea9 8284191: Replace usages of 'a the' in hotspot and java.base
Reviewed-by: lancea, wetmore, naoto, iris, kevinw, xuelei
2022-05-24 11:25:13 +00:00
Xue-Lei Andrew Fan
ffca23a531 8284490: Remove finalizer method in java.security.jgss
Reviewed-by: rriggs, dfuchs, weijun
2022-05-03 14:14:09 +00:00
Weijun Wang
05ae7ed1aa 8284291: sun/security/krb5/auto/Renew.java fails intermittently on Windows 11
Reviewed-by: aturbanov, ascarpino
2022-04-20 18:57:55 +00:00
Sibabrata Sahoo
86015e15a5 8282293: Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
Reviewed-by: weijun, rhalade
2022-03-23 06:45:37 +00:00
Michael McMahon
de3113b998 8279842: HTTPS Channel Binding support for Java GSS/Kerberos
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: dfuchs, weijun, darcy
2022-02-01 07:26:59 +00:00
Weijun Wang
0d1a97f793 8279064: New options for ktab to provide non-default salt
Reviewed-by: valeriep
2022-01-14 20:44:22 +00:00
Weijun Wang
8d0f385fd0 8279520: SPNEGO has not passed channel binding info into the underlying mechanism
Reviewed-by: mullan, valeriep
2022-01-06 22:02:55 +00:00
Weijun Wang
ab867f6c7c 8272162: S4U2Self ticket without forwardable flag
Reviewed-by: valeriep
2021-12-01 00:48:28 +00:00
Weijun Wang
a5c160c711 8267108: Alternate Subject.getSubject and doAs APIs that do not depend on Security Manager APIs
Reviewed-by: mullan
2021-11-10 19:35:17 +00:00
Weijun Wang
8e02064288 8049520: FileCredentialsCache loads cache once and is never refreshed
Reviewed-by: mullan
2021-10-15 13:51:52 +00:00
Weijun Wang
03d3c03384 8273670: Remove weak etypes from default krb5 etype list
Reviewed-by: valeriep, mullan
2021-10-05 18:18:51 +00:00
Alexey Bakhtin
5ba0d09fe4 8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from KDC
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: weijun
2021-09-24 12:09:38 +00:00
Martin Balao
67869b491a 8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup
Reviewed-by: weijun
2021-08-10 16:28:10 +00:00
Weijun Wang
e39346e708 8268093: Manual Testcase: "sun/security/krb5/config/native/TestDynamicStore.java" Fails with NPE
Reviewed-by: mullan
2021-06-11 15:12:11 +00:00
Weijun Wang
640a2afda3 8267184: Add -Djava.security.manager=allow to tests calling System.setSecurityManager
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: dholmes, alanb, dfuchs, mchung, mullan, prr
2021-05-24 16:55:55 +00:00
Weijun Wang
c70589c68c 8265227: Move Proc.java from security/testlibrary to test/lib
Reviewed-by: rriggs, xuelei, rhalade, ssahoo
2021-04-15 15:07:47 +00:00
Weijun Wang
eb5c097b6d 8262389: Use permitted_enctypes if default_tkt_enctypes or default_tgs_enctypes is not present
Reviewed-by: mullan
2021-04-06 23:58:21 +00:00
Fernando Guallini
e1cad97049 8262862: Harden tests sun/security/x509/URICertStore/ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
Reviewed-by: aefimov, michaelm
2021-03-05 16:26:05 +00:00
Weijun Wang
ded96ddcde 8139348: Deprecate 3DES and RC4 in Kerberos
Reviewed-by: mullan
2021-02-25 18:49:05 +00:00
Fernando Guallini
d70fd7b3c4 8258855: Two tests sun/security/krb5/auto/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3
Reviewed-by: weijun, rhalade
2021-02-24 17:05:58 +00:00
Weijun Wang
4a8b5c1602 8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m

Reviewed-by: erikj, prr, ihse, valeriep
2021-02-03 16:20:16 +00:00
Jamil Nimeh
8554fe6ebc 8253866: Security Libs Terminology Refresh
Reviewed-by: erikj, weijun, mullan
2021-01-14 16:36:51 +00:00
Roger Riggs
628c546bea 8258796: [test] Apply HexFormat to tests for java.security
Reviewed-by: xuelei
2021-01-08 21:32:54 +00:00
Weijun Wang
6212aea580 8246193: Possible NPE in ENC-PA-REP search in AS-REQ
Reviewed-by: xuelei
2020-05-31 10:13:04 +08:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Weijun Wang
e13c481c7f 8218482: sun/security/krb5/auto/ReplayCachePrecise.java failed - no KrbException thrown
Reviewed-by: mullan
2020-05-14 23:09:52 +08:00
Martin Balao
2883bccf48 8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
Reviewed-by: weijun
2020-03-28 19:41:10 -03:00
Roger Riggs
bdf672659c 8243010: Test support: Customizable Hex Printer
Reviewed-by: lancea, dfuchs, weijun
2020-04-16 15:45:37 -04:00
Weijun Wang
c4681a95dc 8160818: GssKrb5Client violates RFC 4752
Reviewed-by: xuelei
2020-02-15 09:26:32 +08:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00
Weijun Wang
bda0fba56b 8229951: Better Ticket Granting Services
Reviewed-by: ahgross, valeriep
2019-09-26 18:12:53 +08:00
Martin Balao
4fa827ec92 8005819: Support cross-realm MSSFU
Reviewed-by: weijun
2019-12-11 15:43:42 -03:00
Weijun Wang
2215201dd5 8226352: Improve Kerberos interop capabilities
Reviewed-by: ahgross, mullan, valeriep
2019-07-19 14:51:04 +08:00
Martin Balao
3cd50f2666 8227437: S4U2proxy cannot continue because server's TGT cannot be found
Reviewed-by: weijun
2019-07-17 12:26:56 -03:00
Weijun Wang
c0fddce0f5 8227061: KDC.java test behaves incorrectly when AS-REQ contains a PAData not PA-ENC-TS-ENC
Reviewed-by: mullan
2019-07-04 07:25:11 +08:00
Martin Balao
5aae9ef0db 8215032: Support Kerberos cross-realm referrals (RFC 6806)
Reviewed-by: weijun
2019-06-05 01:42:11 -03:00